CSOC Lead: Cyber Defense & Team Leadership (EMEA)

Northrop Grumman UK; Cheltenham; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Flexible working options

Private healthcare

Pension

Learning & development programmes

Annual incentive program

Job summary

Northrop Grumman UK is seeking an experienced CSOC Lead in Cheltenham to guide a high‑caliber team of cyber threat analysts across the EMEA region. You will balance hands‑on threat hunting and digital forensics with people leadership, shaping incident response and security operations during complex events.

Join a global cybersecurity organisation and collaborate with teams across the UK, Europe and the US to improve defence capabilities, report to senior stakeholders, and drive continuous

Qualifications

• Experience leading or managing a SOC/CSOC.
• Proven leadership of teams, projects or operational cyber security.
• Strong incident response, threat hunting and digital forensics expertise.
• Experience using SIEM, EDR and network analysis platforms.
• Understanding of OSI network protocols and traffic analysis.
• Experience with threat intelligence methodologies.
• Ability to communicate complex issues to executives.
• Proficiency across Windows, Linux and Unix environments.
• Existing trusted relationship with the UK NCSC.
• Experience in defence or high‑classification environments.
• Familiarity with NCSC CAF, DEFSTAN, DCC frameworks.
• Certifications such as GCIH, GCIA, GCFA, CEH.

Responsibilities

• Lead, mentor and develop a team of cyber threat analysts and provide day‑to‑day oversight.
• Manage security operations across the EMEA region with monitoring, triage and response.
• Serve as Incident Response Lead for major cyber events, coordinating investigations and remediation.
• Lead advanced threat hunting and digital forensics using SIEM/EDR and telemetry.
• Collaborate with global CSOC teams to improve defence capabilities and processes.
• Provide clear cyber risk updates and executive summaries to senior stakeholders.
• Represent Northrop Grumman UK in government and industry security forums.
• Drive resilience through exercises and continuous improvement initiatives.

Skills

Leadership

Incident response

Threat hunting

Digital forensics

Executive communication

Stakeholder management

PowerShell scripting

Bash scripting

Cross-platform)

NCSC frameworks

Regulated environments

Nation-state threat awareness

Education

Bachelor's degree in Cyber Security, Computer Science or related

Tools

SIEM platforms

EDR tools

Network analysis tools

Job description

Northrop Grumman UK is seeking an experienced CSOC Lead in Cheltenham to guide a high‑caliber team of cyber threat analysts across the EMEA region. You will balance hands‑on threat hunting and digital forensics with people leadership, shaping incident response and security operations during complex events.

Join a global cybersecurity organisation and collaborate with teams across the UK, Europe and the US to improve defence capabilities, report to senior stakeholders, and drive continuous